It's been a monumental effort, but we are finally OpenSSL free in the whole Kanidm stack - compact_jwt, hsm/tpm, webauthn-rs, kerberos/libkrimes and today Kanidm itself.
@ancoghlan You may especially like https://github.com/kanidm/libkrimes/?tab=readme-ov-file#libkrimes and https://github.com/kanidm/libkrimes/tree/main/static
Yes, we literally commit kerberos memes in this project.